Back to Database
Status published
High
CVE-2024-38534
Suricata modbus: txs without responses are never freed
Vulnerability Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-38534
Credits & Attribution
No credits recorded in the NVD database.
References
More from OISF
View All →CVE-2025-64344
Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer
High
7.5
CVE-2025-64335
Suricata is vulnerable to a null deref when used with base64_data
High
7.5
CVE-2025-64334
Suricata is vulnerable to unbounded memory growth for decompression
High
7.5
CVE-2025-64333
Suricata is vulnerable to a stack overflow from big content-type
High
7.5
CVE-2025-64332
Suricata is vulnerable to a stack overflow on larger compressed data
High
7.5
Affected Vendor
OISF
View all reports →Affected Software
suricata
Vulnerable Versions:
< 7.0.6
Timeline
Official Publish:
July 11th, 2024
Last Modified:
August 2nd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H